Tirith – Detect terminal injection, homograph, and pipe-to-shell attacks